@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.4

package/dist/host/deployment/deployment-mode.d.ts

@@ -0,0 +1,200 @@
+import { type Registry } from '../../core/index';
+/** The environment variable this module parses.
+ *
+ * @stability experimental
+ */
+export declare const DEPLOYMENT_MODE_ENV_VAR = "DEPLOYMENT_MODE";
+/** The platform's own deployment modes, in the order they are documented.
+ *
+ * @stability experimental
+ */
+export declare const BUILTIN_DEPLOYMENT_MODES: readonly ["self-hosted", "saas"];
+/**
+ * The deprecated name of {@link BUILTIN_DEPLOYMENT_MODES}. It lists only the
+ * platform's modes, not the ones an app registered; read
+ * `deploymentModeRegistry.ids()` for those.
+ *
+ * @deprecated Use {@link BUILTIN_DEPLOYMENT_MODES}.
+ * @stability experimental
+ */
+export declare const DEPLOYMENT_MODES: readonly ["self-hosted", "saas"];
+/**
+ * One of the platform's own deployment modes: `self-hosted` or `saas`.
+ *
+ * @stability experimental
+ */
+export type BuiltinDeploymentMode = (typeof BUILTIN_DEPLOYMENT_MODES)[number];
+/**
+ * A deployment mode: a built-in one, or the id of a mode the app registered
+ * with {@link registerDeploymentMode}.
+ *
+ * @stability experimental
+ */
+export type DeploymentMode = BuiltinDeploymentMode | (string & {});
+/**
+ * The id pattern of a deployment mode: lower-case, 2 to 32 characters,
+ * starting with a letter (`self-hosted`, `saas`, `byoc`).
+ *
+ * @stability experimental
+ */
+export declare const DEPLOYMENT_MODE_ID_PATTERN: RegExp;
+/**
+ * The id pattern of a deployment capability: camel case, starting with a
+ * lower-case letter (`inAppRestore`, `multiRegion`).
+ *
+ * @stability experimental
+ */
+export declare const DEPLOYMENT_CAPABILITY_ID_PATTERN: RegExp;
+/** What an unset or empty `DEPLOYMENT_MODE` means.
+ *
+ * @stability experimental
+ */
+export declare const DEFAULT_DEPLOYMENT_MODE: DeploymentMode;
+/**
+ * Parses `DEPLOYMENT_MODE`.
+ *
+ * - `undefined`, `''` or whitespace only → `'self-hosted'`.
+ * - Surrounding whitespace is trimmed (an env file's trailing space is not a
+ *   decision anybody made).
+ * - ⚠ CASE-SENSITIVE. `SaaS` is refused rather than folded, matching the CLI
+ *   deploy wizard's validator: the value is documented in lower case, and a
+ *   parser that accepted variants would make the template and the wizard
+ *   disagree about what is valid.
+ * - Anything else throws, with a message naming the variable and the allowed
+ *   values, so the deploy log says exactly what to fix.
+ *
+ * @throws Error on any value that is not a deployment mode.
+ *
+ * @stability experimental
+ */
+export declare function parseDeploymentMode(raw: string | undefined): DeploymentMode;
+/**
+ * What a deployment mode permits: one boolean per registered capability.
+ * `inAppRestore` is the platform's own; an app adds more with
+ * {@link registerDeploymentCapability} (declare the field on this interface by
+ * declaration merging to type it; an unlisted capability reads as `boolean`
+ * through the index signature).
+ *
+ * @stability experimental
+ */
+export interface DeploymentCapabilities {
+    /**
+     * Whether the application may restore its own database (the `db.restore.run`
+     * job, the restore and rollback routes). `false` in `saas`: recovery is the
+     * managed database provider's point-in-time recovery.
+     */
+    inAppRestore: boolean;
+    /** Any capability an app registered with {@link registerDeploymentCapability}. */
+    [capabilityId: string]: boolean;
+}
+/**
+ * One deployment capability: a yes/no fact about what a mode permits.
+ *
+ * @stability experimental
+ */
+export interface DeploymentCapabilityDef {
+    /** The id. See {@link DEPLOYMENT_CAPABILITY_ID_PATTERN}. */
+    readonly id: string;
+    /** The value in a mode that says nothing about it. */
+    readonly default: boolean;
+    /** The value in particular modes, by mode id. A mode's own entry (see {@link DeploymentModeDef}) wins. */
+    readonly byMode?: Readonly<Record<string, boolean>>;
+}
+/**
+ * One deployment mode.
+ *
+ * @stability experimental
+ */
+export interface DeploymentModeDef {
+    /** The id operators select it by (`DEPLOYMENT_MODE=byoc`). See {@link DEPLOYMENT_MODE_ID_PATTERN}. */
+    readonly id: string;
+    /**
+     * The capabilities this mode sets, by capability id; any other capability
+     * takes its `byMode` entry or its `default`. Every id must be registered by
+     * the time the mode is used.
+     */
+    readonly capabilities: Readonly<Record<string, boolean>>;
+}
+/**
+ * Every registered deployment capability, in registration order (the built-in
+ * `inAppRestore` first). Frozen when the application has bootstrapped.
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+export declare const deploymentCapabilityRegistry: Registry<DeploymentCapabilityDef>;
+/**
+ * Every registered deployment mode, in registration order (`self-hosted`, then
+ * `saas`). Frozen when the application has bootstrapped.
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+export declare const deploymentModeRegistry: Registry<DeploymentModeDef>;
+/**
+ * Registers a deployment capability. Call it at module load, before the
+ * application is created; a duplicate id throws.
+ *
+ * @param capability - the capability.
+ * @throws RegistryError `INVALID_ID`, `INVALID_ENTRY`, `DUPLICATE_ID` or `FROZEN`.
+ *
+ * @example
+ * ```ts
+ * // apps/api/src/app-registrations/host.ts
+ * registerDeploymentCapability({ id: 'bulkExport', default: true, byMode: { saas: false } });
+ * // then: app.get(DeploymentModeService).can('bulkExport')
+ * ```
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+export declare function registerDeploymentCapability(capability: DeploymentCapabilityDef): void;
+/**
+ * Registers a deployment mode, selectable with `DEPLOYMENT_MODE=<id>`. Call it
+ * at module load, before `main.ts` parses the variable; a duplicate id throws.
+ *
+ * @param mode - the mode.
+ * @throws RegistryError `INVALID_ID`, `INVALID_ENTRY`, `DUPLICATE_ID` or `FROZEN`.
+ *
+ * @example
+ * ```ts
+ * // apps/api/src/app-registrations/host.ts
+ * registerDeploymentMode({ id: 'byoc', capabilities: { inAppRestore: false } });
+ * ```
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+export declare function registerDeploymentMode(mode: DeploymentModeDef): void;
+/**
+ * Pure. What `mode` permits: for each registered capability, the mode's own
+ * entry, else the capability's `byMode` entry, else its `default`.
+ *
+ * @param mode - a registered deployment mode.
+ * @returns one boolean per registered capability.
+ * @throws Error when `mode` is not registered, or the mode sets a capability nobody registered.
+ *
+ * @stability experimental
+ */
+export declare function capabilitiesFor(mode: DeploymentMode): DeploymentCapabilities;
+/** One line for the startup log.
+ *
+ * @stability experimental
+ */
+export declare function describeDeploymentMode(mode: DeploymentMode): string;
+/**
+ * The bootstrap check: parse the variable, log the mode once, return it.
+ *
+ * Called from `main.ts` BEFORE the Nest application is created, next to the
+ * `CORS_ORIGIN` parse, because it needs nothing but the environment: a
+ * deployment with a typo never opens a database connection and never binds the
+ * port. Throws (rather than exiting) for the same reason the other bootstrap
+ * checks do — `bootstrap()` is called unhandled, so the rejection exits Node
+ * non-zero with the message on stderr.
+ *
+ * @stability experimental
+ */
+export declare function verifyDeploymentModeAtStartup(env: Record<string, string | undefined>, logger: {
+    log(message: string): void;
+}): DeploymentMode;
+//# sourceMappingURL=deployment-mode.d.ts.map

package/dist/host/deployment/deployment-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-mode.d.ts","sourceRoot":"","sources":["../../../src/host/deployment/deployment-mode.ts"],"names":[],"mappings":"AAuCA,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEjE;;;GAGG;AACH,eAAO,MAAM,uBAAuB,oBAAoB,CAAC;AAEzD;;;GAGG;AACH,eAAO,MAAM,wBAAwB,kCAAmC,CAAC;AAEzE;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,kCAA2B,CAAC;AAEzD;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9E;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,qBAAqB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAEnE;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,QAA2B,CAAC;AAEnE;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,QAA6B,CAAC;AAE3E;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE,cAA8B,CAAC;AAErE;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,cAAc,CAiB3E;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,YAAY,EAAE,OAAO,CAAC;IACtB,kFAAkF;IAClF,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,0GAA0G;IAC1G,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACrD;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,sGAAsG;IACtG,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC1D;AAWD;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,EAAE,QAAQ,CAAC,uBAAuB,CASzE,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,iBAAiB,CAO7D,CAAC;AAEH;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,4BAA4B,CAAC,UAAU,EAAE,uBAAuB,GAAG,IAAI,CAEtF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI,CAEpE;AAOD;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,cAAc,GAAG,sBAAsB,CAuB5E;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CASnE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,MAAM,EAAE;IAAE,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACrC,cAAc,CAMhB"}

package/dist/host/deployment/deployment-mode.js

@@ -0,0 +1,261 @@
+"use strict";
+// =============================================================================
+// DEPLOYMENT_MODE — what kind of deployment this process is part of (#685)
+// =============================================================================
+//
+// The platform-packages spec (docs/specs/platform-packages.md, "Deployment
+// modes") runs SaaS, BYOC and on-prem from one codebase. The first behaviour
+// that differs between them is in-app database restore: a SaaS deployment sits
+// on a managed database (RDS with point-in-time recovery), where recovery
+// belongs to the provider and the application's role should hold neither
+// `CREATEDB` nor rename rights. So `saas` turns in-app restore off; backups keep
+// working in both modes.
+//
+// A DEPLOYMENT-LEVEL FACT, AND THEREFORE AN ENVIRONMENT VARIABLE. It is decided
+// by whoever runs the infrastructure, like `JOBS_WORKER_MODE`, and it is not a
+// runtime setting: an administrator (or a compromised admin account) must not
+// be able to switch a SaaS deployment back to self-hosted from the UI and then
+// run a database swap. It is read once, at startup.
+//
+// ⚠ AN INVALID VALUE FAILS STARTUP, unlike `JOBS_WORKER_MODE` (unknown → `all`
+// with a warning). Silently picking a mode is unsafe in BOTH directions:
+// `self-hosted` re-enables a destructive capability on a SaaS deployment, and
+// `saas` silently removes recovery from an on-prem install. Only "unset" (or
+// empty) has a default, `self-hosted`, which is what every deployment that
+// predates this variable is.
+//
+// OPEN VOCABULARIES (PP-14.13). The two modes above are the platform's
+// `BUILTIN_DEPLOYMENT_MODES`; an app adds its own with `registerDeploymentMode`
+// (a BYOC mode, an on-prem mode) and its own switches with
+// `registerDeploymentCapability`, both AT IMPORT TIME, before `main.ts` parses
+// the variable. The platform's `saas` mode and `inAppRestore` capability
+// register through the same two functions. What a mode permits is resolved in
+// one place, `capabilitiesFor`: the mode's own entry, else the capability's
+// `byMode` entry, else its `default`.
+//
+// This module is PURE: no Nest, no `process.env`. The parse is the single
+// source of truth; `main.ts` calls it at bootstrap and `DeploymentModeService`
+// calls it again when the container builds, so neither can disagree with it.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deploymentModeRegistry = exports.deploymentCapabilityRegistry = exports.DEFAULT_DEPLOYMENT_MODE = exports.DEPLOYMENT_CAPABILITY_ID_PATTERN = exports.DEPLOYMENT_MODE_ID_PATTERN = exports.DEPLOYMENT_MODES = exports.BUILTIN_DEPLOYMENT_MODES = exports.DEPLOYMENT_MODE_ENV_VAR = void 0;
+exports.parseDeploymentMode = parseDeploymentMode;
+exports.registerDeploymentCapability = registerDeploymentCapability;
+exports.registerDeploymentMode = registerDeploymentMode;
+exports.capabilitiesFor = capabilitiesFor;
+exports.describeDeploymentMode = describeDeploymentMode;
+exports.verifyDeploymentModeAtStartup = verifyDeploymentModeAtStartup;
+const index_1 = require("../../core/index");
+/** The environment variable this module parses.
+ *
+ * @stability experimental
+ */
+exports.DEPLOYMENT_MODE_ENV_VAR = 'DEPLOYMENT_MODE';
+/** The platform's own deployment modes, in the order they are documented.
+ *
+ * @stability experimental
+ */
+exports.BUILTIN_DEPLOYMENT_MODES = ['self-hosted', 'saas'];
+/**
+ * The deprecated name of {@link BUILTIN_DEPLOYMENT_MODES}. It lists only the
+ * platform's modes, not the ones an app registered; read
+ * `deploymentModeRegistry.ids()` for those.
+ *
+ * @deprecated Use {@link BUILTIN_DEPLOYMENT_MODES}.
+ * @stability experimental
+ */
+exports.DEPLOYMENT_MODES = exports.BUILTIN_DEPLOYMENT_MODES;
+/**
+ * The id pattern of a deployment mode: lower-case, 2 to 32 characters,
+ * starting with a letter (`self-hosted`, `saas`, `byoc`).
+ *
+ * @stability experimental
+ */
+exports.DEPLOYMENT_MODE_ID_PATTERN = /^[a-z][a-z0-9-]{1,31}$/;
+/**
+ * The id pattern of a deployment capability: camel case, starting with a
+ * lower-case letter (`inAppRestore`, `multiRegion`).
+ *
+ * @stability experimental
+ */
+exports.DEPLOYMENT_CAPABILITY_ID_PATTERN = /^[a-z][A-Za-z0-9]{1,47}$/;
+/** What an unset or empty `DEPLOYMENT_MODE` means.
+ *
+ * @stability experimental
+ */
+exports.DEFAULT_DEPLOYMENT_MODE = 'self-hosted';
+/**
+ * Parses `DEPLOYMENT_MODE`.
+ *
+ * - `undefined`, `''` or whitespace only → `'self-hosted'`.
+ * - Surrounding whitespace is trimmed (an env file's trailing space is not a
+ *   decision anybody made).
+ * - ⚠ CASE-SENSITIVE. `SaaS` is refused rather than folded, matching the CLI
+ *   deploy wizard's validator: the value is documented in lower case, and a
+ *   parser that accepted variants would make the template and the wizard
+ *   disagree about what is valid.
+ * - Anything else throws, with a message naming the variable and the allowed
+ *   values, so the deploy log says exactly what to fix.
+ *
+ * @throws Error on any value that is not a deployment mode.
+ *
+ * @stability experimental
+ */
+function parseDeploymentMode(raw) {
+    const value = (raw ?? '').trim();
+    if (value === '')
+        return exports.DEFAULT_DEPLOYMENT_MODE;
+    if (exports.deploymentModeRegistry.has(value)) {
+        return value;
+    }
+    throw new Error(`${exports.DEPLOYMENT_MODE_ENV_VAR}=${JSON.stringify(raw)} is not a valid deployment mode. ` +
+        `Allowed values: ${exports.deploymentModeRegistry.ids().join(', ')} (unset means ${exports.DEFAULT_DEPLOYMENT_MODE}). ` +
+        'The API refuses to start rather than guess, because either guess changes whether ' +
+        'in-app database restore is available. Fix the value in the deployment environment ' +
+        '(infra/compose/.env) and restart. A mode the app defines is registered with ' +
+        'registerDeploymentMode() at import time, before the API starts.');
+}
+function assertBooleanRecord(owner, what, value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error(`${owner}: ${what} must be an object of booleans`);
+    }
+    for (const [key, entry] of Object.entries(value)) {
+        if (typeof entry !== 'boolean')
+            throw new Error(`${owner}: ${what}.${key} must be a boolean`);
+    }
+}
+/**
+ * Every registered deployment capability, in registration order (the built-in
+ * `inAppRestore` first). Frozen when the application has bootstrapped.
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+exports.deploymentCapabilityRegistry = (0, index_1.defineRegistry)({
+    name: 'host.deployment-capabilities',
+    idOf: (capability) => capability.id,
+    idPattern: exports.DEPLOYMENT_CAPABILITY_ID_PATTERN,
+    validate: (capability) => {
+        const owner = `deployment capability "${capability.id}"`;
+        if (typeof capability.default !== 'boolean')
+            throw new Error(`${owner}: default must be a boolean`);
+        if (capability.byMode !== undefined)
+            assertBooleanRecord(owner, 'byMode', capability.byMode);
+    },
+});
+/**
+ * Every registered deployment mode, in registration order (`self-hosted`, then
+ * `saas`). Frozen when the application has bootstrapped.
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+exports.deploymentModeRegistry = (0, index_1.defineRegistry)({
+    name: 'host.deployment-modes',
+    idOf: (mode) => mode.id,
+    idPattern: exports.DEPLOYMENT_MODE_ID_PATTERN,
+    validate: (mode) => {
+        assertBooleanRecord(`deployment mode "${mode.id}"`, 'capabilities', mode.capabilities);
+    },
+});
+/**
+ * Registers a deployment capability. Call it at module load, before the
+ * application is created; a duplicate id throws.
+ *
+ * @param capability - the capability.
+ * @throws RegistryError `INVALID_ID`, `INVALID_ENTRY`, `DUPLICATE_ID` or `FROZEN`.
+ *
+ * @example
+ * ```ts
+ * // apps/api/src/app-registrations/host.ts
+ * registerDeploymentCapability({ id: 'bulkExport', default: true, byMode: { saas: false } });
+ * // then: app.get(DeploymentModeService).can('bulkExport')
+ * ```
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+function registerDeploymentCapability(capability) {
+    exports.deploymentCapabilityRegistry.register(capability);
+}
+/**
+ * Registers a deployment mode, selectable with `DEPLOYMENT_MODE=<id>`. Call it
+ * at module load, before `main.ts` parses the variable; a duplicate id throws.
+ *
+ * @param mode - the mode.
+ * @throws RegistryError `INVALID_ID`, `INVALID_ENTRY`, `DUPLICATE_ID` or `FROZEN`.
+ *
+ * @example
+ * ```ts
+ * // apps/api/src/app-registrations/host.ts
+ * registerDeploymentMode({ id: 'byoc', capabilities: { inAppRestore: false } });
+ * ```
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+function registerDeploymentMode(mode) {
+    exports.deploymentModeRegistry.register(mode);
+}
+// The platform's own mode and capability, through the same functions an app uses.
+registerDeploymentCapability({ id: 'inAppRestore', default: true, byMode: { saas: false } });
+registerDeploymentMode({ id: 'self-hosted', capabilities: {} });
+registerDeploymentMode({ id: 'saas', capabilities: {} });
+/**
+ * Pure. What `mode` permits: for each registered capability, the mode's own
+ * entry, else the capability's `byMode` entry, else its `default`.
+ *
+ * @param mode - a registered deployment mode.
+ * @returns one boolean per registered capability.
+ * @throws Error when `mode` is not registered, or the mode sets a capability nobody registered.
+ *
+ * @stability experimental
+ */
+function capabilitiesFor(mode) {
+    const definition = exports.deploymentModeRegistry.get(mode);
+    if (!definition) {
+        throw new Error(`Unknown deployment mode "${mode}". Registered modes: ${exports.deploymentModeRegistry.ids().join(', ')}. ` +
+            'Register one with registerDeploymentMode() at import time.');
+    }
+    for (const id of Object.keys(definition.capabilities)) {
+        if (!exports.deploymentCapabilityRegistry.has(id)) {
+            throw new Error(`Deployment mode "${mode}" sets the capability "${id}", which nobody registered. ` +
+                `Registered capabilities: ${exports.deploymentCapabilityRegistry.ids().join(', ')}. ` +
+                'Register it with registerDeploymentCapability() at import time.');
+        }
+    }
+    const resolved = {};
+    for (const capability of exports.deploymentCapabilityRegistry.list()) {
+        resolved[capability.id] = definition.capabilities[capability.id] ?? capability.byMode?.[mode] ?? capability.default;
+    }
+    return resolved;
+}
+/** One line for the startup log.
+ *
+ * @stability experimental
+ */
+function describeDeploymentMode(mode) {
+    const capabilities = capabilitiesFor(mode);
+    return (`Deployment mode: ${mode} (${exports.DEPLOYMENT_MODE_ENV_VAR}). In-app database restore is ` +
+        (capabilities.inAppRestore
+            ? 'available; in-app backups are available.'
+            : "DISABLED (use the database provider's point-in-time recovery); in-app backups are available."));
+}
+/**
+ * The bootstrap check: parse the variable, log the mode once, return it.
+ *
+ * Called from `main.ts` BEFORE the Nest application is created, next to the
+ * `CORS_ORIGIN` parse, because it needs nothing but the environment: a
+ * deployment with a typo never opens a database connection and never binds the
+ * port. Throws (rather than exiting) for the same reason the other bootstrap
+ * checks do — `bootstrap()` is called unhandled, so the rejection exits Node
+ * non-zero with the message on stderr.
+ *
+ * @stability experimental
+ */
+function verifyDeploymentModeAtStartup(env, logger) {
+    const mode = parseDeploymentMode(env[exports.DEPLOYMENT_MODE_ENV_VAR]);
+    logger.log(describeDeploymentMode(mode));
+    return mode;
+}
+//# sourceMappingURL=deployment-mode.js.map

package/dist/host/deployment/deployment-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-mode.js","sourceRoot":"","sources":["../../../src/host/deployment/deployment-mode.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,2EAA2E;AAC3E,gFAAgF;AAChF,EAAE;AACF,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,0EAA0E;AAC1E,yEAAyE;AACzE,iFAAiF;AACjF,yBAAyB;AACzB,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,oDAAoD;AACpD,EAAE;AACF,+EAA+E;AAC/E,yEAAyE;AACzE,8EAA8E;AAC9E,6EAA6E;AAC7E,2EAA2E;AAC3E,6BAA6B;AAC7B,EAAE;AACF,uEAAuE;AACvE,gFAAgF;AAChF,2DAA2D;AAC3D,+EAA+E;AAC/E,yEAAyE;AACzE,8EAA8E;AAC9E,4EAA4E;AAC5E,sCAAsC;AACtC,EAAE;AACF,0EAA0E;AAC1E,+EAA+E;AAC/E,6EAA6E;AAC7E,gFAAgF;;;AAgFhF,kDAiBC;AAgHD,oEAEC;AAkBD,wDAEC;AAiBD,0CAuBC;AAMD,wDASC;AAcD,sEASC;AAnTD,4CAAiE;AAEjE;;;GAGG;AACU,QAAA,uBAAuB,GAAG,iBAAiB,CAAC;AAEzD;;;GAGG;AACU,QAAA,wBAAwB,GAAG,CAAC,aAAa,EAAE,MAAM,CAAU,CAAC;AAEzE;;;;;;;GAOG;AACU,QAAA,gBAAgB,GAAG,gCAAwB,CAAC;AAiBzD;;;;;GAKG;AACU,QAAA,0BAA0B,GAAG,wBAAwB,CAAC;AAEnE;;;;;GAKG;AACU,QAAA,gCAAgC,GAAG,0BAA0B,CAAC;AAE3E;;;GAGG;AACU,QAAA,uBAAuB,GAAmB,aAAa,CAAC;AAErE;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,mBAAmB,CAAC,GAAuB;IACzD,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAEjC,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,+BAAuB,CAAC;IAEjD,IAAI,8BAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,KAAK,CACb,GAAG,+BAAuB,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,mCAAmC;QAClF,mBAAmB,8BAAsB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,+BAAuB,KAAK;QACvG,mFAAmF;QACnF,oFAAoF;QACpF,8EAA8E;QAC9E,iEAAiE,CACpE,CAAC;AACJ,CAAC;AAoDD,SAAS,mBAAmB,CAAC,KAAa,EAAE,IAAY,EAAE,KAAc;IACtE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,IAAI,gCAAgC,CAAC,CAAC;IACrE,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,OAAO,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,IAAI,IAAI,GAAG,oBAAoB,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACU,QAAA,4BAA4B,GAAsC,IAAA,sBAAc,EAA0B;IACrH,IAAI,EAAE,8BAA8B;IACpC,IAAI,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE;IACnC,SAAS,EAAE,wCAAgC;IAC3C,QAAQ,EAAE,CAAC,UAAU,EAAE,EAAE;QACvB,MAAM,KAAK,GAAG,0BAA0B,UAAU,CAAC,EAAE,GAAG,CAAC;QACzD,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;QACpG,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS;YAAE,mBAAmB,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/F,CAAC;CACF,CAAC,CAAC;AAEH;;;;;;GAMG;AACU,QAAA,sBAAsB,GAAgC,IAAA,sBAAc,EAAoB;IACnG,IAAI,EAAE,uBAAuB;IAC7B,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE;IACvB,SAAS,EAAE,kCAA0B;IACrC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;QACjB,mBAAmB,CAAC,oBAAoB,IAAI,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACzF,CAAC;CACF,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,4BAA4B,CAAC,UAAmC;IAC9E,oCAA4B,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,sBAAsB,CAAC,IAAuB;IAC5D,8BAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,kFAAkF;AAClF,4BAA4B,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AAC7F,sBAAsB,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;AAChE,sBAAsB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;AAEzD;;;;;;;;;GASG;AACH,SAAgB,eAAe,CAAC,IAAoB;IAClD,MAAM,UAAU,GAAG,8BAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAI,wBAAwB,8BAAsB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACjG,4DAA4D,CAC/D,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,oCAA4B,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,oBAAoB,IAAI,0BAA0B,EAAE,8BAA8B;gBAChF,4BAA4B,oCAA4B,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBAC7E,iEAAiE,CACpE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,KAAK,MAAM,UAAU,IAAI,oCAA4B,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7D,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC;IACtH,CAAC;IACD,OAAO,QAAkC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,IAAoB;IACzD,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAE3C,OAAO,CACL,oBAAoB,IAAI,KAAK,+BAAuB,gCAAgC;QACpF,CAAC,YAAY,CAAC,YAAY;YACxB,CAAC,CAAC,0CAA0C;YAC5C,CAAC,CAAC,8FAA8F,CAAC,CACpG,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,6BAA6B,CAC3C,GAAuC,EACvC,MAAsC;IAEtC,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,+BAAuB,CAAC,CAAC,CAAC;IAE/D,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;IAEzC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/host/deployment/deployment-mode.service.d.ts

@@ -0,0 +1,51 @@
+import { ConfigService } from '@nestjs/config';
+import { type DeploymentCapabilities, type DeploymentMode } from './deployment-mode';
+/**
+ * The configuration key the app publishes the raw `DEPLOYMENT_MODE` string
+ * under (`config/configuration.ts`: `deployment.mode`). An app that publishes
+ * none is read from the environment variable directly.
+ *
+ * @stability experimental
+ */
+export declare const DEPLOYMENT_MODE_CONFIG_KEY = "deployment.mode";
+/**
+ * The parsed `DEPLOYMENT_MODE` and what it permits (#685).
+ *
+ * Provided by the `@Global()` `DeploymentModule`, so any feature injects it
+ * without an import edge. Parsed ONCE, in the constructor, from the raw string
+ * `configuration.ts` publishes as `deployment.mode`, through the same pure
+ * `parseDeploymentMode` `main.ts` already ran at bootstrap — so an invalid value
+ * fails the container build too (a test module, a script that boots Nest
+ * without `main.ts`), and the two can never disagree.
+ *
+ * Read-only for the life of the process: the mode is a fact about the
+ * deployment, changed by its operator and a restart, never at runtime.
+ *
+ * @stability experimental
+ */
+export declare class DeploymentModeService {
+    /** The parsed mode. */
+    readonly mode: DeploymentMode;
+    /** What the mode permits. */
+    readonly capabilities: Readonly<DeploymentCapabilities>;
+    constructor(config: ConfigService);
+    /**
+     * Whether this deployment's mode permits a capability: a platform one
+     * (`inAppRestore`) or one the app registered with `registerDeploymentCapability`.
+     *
+     * @param capabilityId - the capability's id.
+     * @returns whether it is permitted.
+     * @throws Error when nobody registered `capabilityId`.
+     */
+    can(capabilityId: string): boolean;
+    /** Whether the application may restore its own database here. */
+    get inAppRestoreEnabled(): boolean;
+    /**
+     * The restore path's first statement.
+     *
+     * @throws DatabaseRestoreDisabledError when this deployment's mode turns
+     * in-app restore off (`saas`).
+     */
+    assertInAppRestoreEnabled(): void;
+}
+//# sourceMappingURL=deployment-mode.service.d.ts.map

package/dist/host/deployment/deployment-mode.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-mode.service.d.ts","sourceRoot":"","sources":["../../../src/host/deployment/deployment-mode.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAG/C,OAAO,EAIL,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACpB,MAAM,mBAAmB,CAAC;AAE3B;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,oBAAoB,CAAC;AAE5D;;;;;;;;;;;;;;GAcG;AACH,qBACa,qBAAqB;IAChC,uBAAuB;IACvB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAE9B,6BAA6B;IAC7B,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;gBAE5C,MAAM,EAAE,aAAa;IAKjC;;;;;;;OAOG;IACH,GAAG,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;IASlC,iEAAiE;IACjE,IAAI,mBAAmB,IAAI,OAAO,CAEjC;IAED;;;;;OAKG;IACH,yBAAyB,IAAI,IAAI;CAGlC"}

package/dist/host/deployment/deployment-mode.service.js

@@ -0,0 +1,83 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeploymentModeService = exports.DEPLOYMENT_MODE_CONFIG_KEY = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const index_1 = require("../../db-backup/index");
+const deployment_mode_1 = require("./deployment-mode");
+/**
+ * The configuration key the app publishes the raw `DEPLOYMENT_MODE` string
+ * under (`config/configuration.ts`: `deployment.mode`). An app that publishes
+ * none is read from the environment variable directly.
+ *
+ * @stability experimental
+ */
+exports.DEPLOYMENT_MODE_CONFIG_KEY = 'deployment.mode';
+/**
+ * The parsed `DEPLOYMENT_MODE` and what it permits (#685).
+ *
+ * Provided by the `@Global()` `DeploymentModule`, so any feature injects it
+ * without an import edge. Parsed ONCE, in the constructor, from the raw string
+ * `configuration.ts` publishes as `deployment.mode`, through the same pure
+ * `parseDeploymentMode` `main.ts` already ran at bootstrap — so an invalid value
+ * fails the container build too (a test module, a script that boots Nest
+ * without `main.ts`), and the two can never disagree.
+ *
+ * Read-only for the life of the process: the mode is a fact about the
+ * deployment, changed by its operator and a restart, never at runtime.
+ *
+ * @stability experimental
+ */
+let DeploymentModeService = class DeploymentModeService {
+    /** The parsed mode. */
+    mode;
+    /** What the mode permits. */
+    capabilities;
+    constructor(config) {
+        this.mode = (0, deployment_mode_1.parseDeploymentMode)(config.get(exports.DEPLOYMENT_MODE_CONFIG_KEY) ?? process.env[deployment_mode_1.DEPLOYMENT_MODE_ENV_VAR]);
+        this.capabilities = Object.freeze((0, deployment_mode_1.capabilitiesFor)(this.mode));
+    }
+    /**
+     * Whether this deployment's mode permits a capability: a platform one
+     * (`inAppRestore`) or one the app registered with `registerDeploymentCapability`.
+     *
+     * @param capabilityId - the capability's id.
+     * @returns whether it is permitted.
+     * @throws Error when nobody registered `capabilityId`.
+     */
+    can(capabilityId) {
+        if (!Object.hasOwn(this.capabilities, capabilityId)) {
+            throw new Error(`Unknown deployment capability "${capabilityId}". Register it with registerDeploymentCapability() at import time.`);
+        }
+        return this.capabilities[capabilityId];
+    }
+    /** Whether the application may restore its own database here. */
+    get inAppRestoreEnabled() {
+        return this.capabilities.inAppRestore;
+    }
+    /**
+     * The restore path's first statement.
+     *
+     * @throws DatabaseRestoreDisabledError when this deployment's mode turns
+     * in-app restore off (`saas`).
+     */
+    assertInAppRestoreEnabled() {
+        if (!this.capabilities.inAppRestore)
+            throw new index_1.DatabaseRestoreDisabledError();
+    }
+};
+exports.DeploymentModeService = DeploymentModeService;
+exports.DeploymentModeService = DeploymentModeService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [config_1.ConfigService])
+], DeploymentModeService);
+//# sourceMappingURL=deployment-mode.service.js.map

package/dist/host/deployment/deployment-mode.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-mode.service.js","sourceRoot":"","sources":["../../../src/host/deployment/deployment-mode.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,2CAA+C;AAE/C,iDAAqE;AACrE,uDAM2B;AAE3B;;;;;;GAMG;AACU,QAAA,0BAA0B,GAAG,iBAAiB,CAAC;AAE5D;;;;;;;;;;;;;;GAcG;AAEI,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,uBAAuB;IACd,IAAI,CAAiB;IAE9B,6BAA6B;IACpB,YAAY,CAAmC;IAExD,YAAY,MAAqB;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAA,qCAAmB,EAAC,MAAM,CAAC,GAAG,CAAS,kCAA0B,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,yCAAuB,CAAC,CAAC,CAAC;QACxH,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,IAAA,iCAAe,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,CAAC;IAED;;;;;;;OAOG;IACH,GAAG,CAAC,YAAoB;QACtB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CACb,kCAAkC,YAAY,oEAAoE,CACnH,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;IACzC,CAAC;IAED,iEAAiE;IACjE,IAAI,mBAAmB;QACrB,OAAO,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;IACxC,CAAC;IAED;;;;;OAKG;IACH,yBAAyB;QACvB,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY;YAAE,MAAM,IAAI,oCAA4B,EAAE,CAAC;IAChF,CAAC;CACF,CAAA;AA3CY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;qCAQS,sBAAa;GAPtB,qBAAqB,CA2CjC"}

package/dist/host/deployment/deployment-network.d.ts

@@ -0,0 +1,41 @@
+import { DEPLOYMENT_NETWORKS, type DeploymentNetwork } from '../../doctor/index';
+export { DEPLOYMENT_NETWORKS, type DeploymentNetwork };
+/** The environment variable this module parses.
+ *
+ * @stability experimental
+ */
+export declare const DEPLOYMENT_NETWORK_ENV_VAR = "DEPLOYMENT_NETWORK";
+/** What an unset or empty `DEPLOYMENT_NETWORK` means.
+ *
+ * @stability experimental
+ */
+export declare const DEFAULT_DEPLOYMENT_NETWORK: DeploymentNetwork;
+/**
+ * Parses `DEPLOYMENT_NETWORK`.
+ *
+ * - `undefined`, `''` or whitespace only → `'online'`.
+ * - Surrounding whitespace is trimmed.
+ * - ⚠ CASE-SENSITIVE, matching the CLI wizard's validator (`Air-Gapped` is refused).
+ * - Anything else throws, naming the variable and the allowed values.
+ *
+ * @throws Error on any value that is not a deployment network.
+ *
+ * @stability experimental
+ */
+export declare function parseDeploymentNetwork(raw: string | undefined): DeploymentNetwork;
+/** One line for the startup log.
+ *
+ * @stability experimental
+ */
+export declare function describeDeploymentNetwork(network: DeploymentNetwork): string;
+/**
+ * The bootstrap check: parse the variable, log the network once, return it.
+ * Called from `main.ts` beside `verifyDeploymentModeAtStartup`, before the Nest
+ * application exists, so a typo never opens a database connection.
+ *
+ * @stability experimental
+ */
+export declare function verifyDeploymentNetworkAtStartup(env: Record<string, string | undefined>, logger: {
+    log(message: string): void;
+}): DeploymentNetwork;
+//# sourceMappingURL=deployment-network.d.ts.map

package/dist/host/deployment/deployment-network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-network.d.ts","sourceRoot":"","sources":["../../../src/host/deployment/deployment-network.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,mBAAmB,EAAE,KAAK,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEjF,OAAO,EAAE,mBAAmB,EAAE,KAAK,iBAAiB,EAAE,CAAC;AAEvD;;;GAGG;AACH,eAAO,MAAM,0BAA0B,uBAAuB,CAAC;AAE/D;;;GAGG;AACH,eAAO,MAAM,0BAA0B,EAAE,iBAA4B,CAAC;AAEtE;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,iBAAiB,CAgBjF;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAI5E;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAC9C,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,MAAM,EAAE;IAAE,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACrC,iBAAiB,CAMnB"}